Mobile payment device

ABSTRACT

A system, apparatus, and method for facilitating the payment and collection of transit system fares using a mobile device. The inventive system utilizes a contactless element embedded within a mobile wireless device, such as a mobile phone, PDA, or the like. The smart element is integrated with the circuitry of the mobile device to permit the data to be accessed and manipulated (e.g., read, written, erased) using the wireless communications network as the data transport channel. The data required to enable a user to access a transit system and for the system to conduct fare calculations may be provided to the memory in the contactless element using the wireless network. Such data may include access control data (keys, passwords, identification data) or data required for fare calculations (rates, historical data on system use).

BACKGROUND OF THE INVENTION

The present invention is directed to systems, apparatuses and methodsfor the payment and collection of transit fares, and more specifically,to a system and associated apparatus and method that utilizes a mobiledevice such as a cell phone to enable payment of a transit fare. Thepresent invention is further directed to systems, methods andapparatuses for using a contactless element such as an integratedcircuit chip embedded in a wireless mobile device that may combinetransaction payment and transit fare payment capabilities.

Many people regularly commute to work or travel for other purposes usingtransportation systems. Such systems include public transportationsystems, for example, buses, subways, trains, ferries, and the like.Typically, these transportations systems require some form of farepayment at one or more sites of the system. One means of fare payment isthe use of some form of payment card, from which a fare can be deductedagainst a previously established balance, or to which a fare can beapplied as a credit type debt to be paid at a later date. However, suchpayment cards generally require that the user pass the card through acard reader or other mechanism, or hand the card to a transit operator.This requirement is inefficient and sub-optimal as transit users areoften in a hurry, and do not wish to wait in lines or engage in a formaltransaction process that may require more time than desired forauthentication of the user and approval of the transaction.

The problems encountered in standard payment card systems has led to aninterest in the use of contactless “smart” cards or contactless smartchips as part of a fare payment system. A smart card is generallydefined as a pocket-sized card (or other portable payment device) thatis embedded with either a microprocessor and one or more memory chips,or one or more memory chips with non-programmable logic. Themicroprocessor type card typically can implement certain data processingfunctions, such as to add, delete, or otherwise manipulate informationstored in a memory location on the card. In contrast, the memory chiptype card (for example, a pre-paid phone card) can only act as a file tohold data that is manipulated by the reading device to perform apre-defined operation, such as debiting a charge from a pre-establishedbalance held in the memory or secure memory. Smart cards, unlikemagnetic stripe cards (such as standard credit cards), can implement avariety of functions and contain a variety of types of information onthe card. Therefore, in some applications they do not require access toremote databases for the purpose of user authentication or recordkeeping at the time of a transaction. A smart chip is a semiconductordevice that is capable of performing most, if not all, of the functionsof a smart card, but may be embedded in another device.

Smart cards come in two general varieties; the contact type and thecontactless type. A contact type smart card is one that includescontacts which enable access to the data and functional capabilities ofthe card, typically via some form of terminal or card reader. Acontactless smart card is a smart card that incorporates a means ofcommunicating with the card reader or terminal without the need fordirect contact. Thus, such cards may effectively be “swiped” by passingthem close to the card reader or terminal. Such contactless cardstypically communicate with the card reader or terminal using RF(radio-frequency) technology, wherein proximity to an antenna causesdata transfer between the card and the reader or terminal. Contactlesscards have found uses in banking and transit applications, as they maynot require removal from one's wallet or pocket in order to complete atransaction. Further, because of the growing interest in such cards,standards have been developed that govern the operation and interfacesfor contactless smart cards, such as the ISO 14433 standard.

Even though contactless smart cards provide a solution to some of theproblems encountered by standard payment cards in a transit fare paymentand collection environment, they do not provide a complete solution. Intransit applications, the speed of the transaction for the user is aprimary consideration. This means that the transit fare payment andcollection process can not be performed effectively using a standardon-line authentication and approval process, as may be used for apurchase transaction at a retail point of sale through the financialpayment network. This presents a difficulty because effective fraudprevention typically requires authentication that the card user isentitled to access the transit system and has sufficient funds for thedesired transaction. In addition, different transit systems willtypically have different authentication requirements, fare calculations,and ancillary data requirements. This means that the smart card mustcontain the data relevant for the transit system a user wishes toutilize when the user attempts to access the system. This can become asignificant problem if a user wishes to utilize more than one transitsystem, such as two transit agencies within a single geographical areaor transit systems in two different cities or locations.

Further, as transit typically involves moving between stations, withdifferent fare calculations and rates required depending upon the actualtravel distance, direction, patron category, and/or times of use, faresmay need to be computed based on station entry and exit location,direction, mode of travel, category of patron, and possibly time of day.This would require that the smart card terminals/readers at each stationor route be able to perform these computations based on data stored andretrieved from a user's card, and subsequent card terminals/readers beable to access data written to the card at previous stations.

Thus, the transit environment presents several issues that make use of astandard contactless smart card or chip problematic. In addition tothose noted, these issues include:

-   -   A need for one card per transit agency or group of cooperating        agencies;    -   If a contactless payment card is used, it typically lacks the        ability to write back to the chip, and data is not available on        subsequent transactions to calculate the fare. This adds to the        burden of the system having to keep track of card history and        calculate the fare in a post processing system rather than at        the gate or farebox;    -   It may be required that a patron, who is visiting a location or        agency for the first time may need to register their card for        use in that system. This may take a physical process of going        and doing something before the card may be used in transit at        the new location; and    -   Each agency or region may utilize a different set of file        structures and/or information to handle their fare policy, and a        single card may lack the appropriate data formats or encryption        capability.

What is desired is a system, apparatus and method for payment andcollection of transit fares that utilizes a contactless smart chip andwhich overcomes the noted disadvantages of current approaches.

BRIEF SUMMARY OF THE INVENTION

The present invention is directed to a system, apparatus, and method forfacilitating the payment and collection of transaction fees or faresusing a contactless element such as a contactless smart chip. Theinventive system can utilize a contactless element including, forexample, a contactless smart chip and a wireless data transfer element(e.g., an antenna, LED, laser diode, etc.), embedded within a mobilewireless device, such as a mobile phone, PDA, MP3 player or the like.The smart chip, or other type of device, can be integrated with thecircuitry of the mobile device to permit data stored on the chip to beaccessed and manipulated (e.g., read, written, erased) using thewireless communications network as the data transport channel. In thisway, the data required to enable a user to access, for example, atransit system and data for the system to conduct fare calculations maybe provided to the chip using the wireless network. Such data mayinclude access control data (keys, passwords, identification data) ordata required for fare calculations (rates, historical data on systemuse), for example.

The contactless element associated with the mobile device may combinefinancial payment functions and transit specific functions within one ormore secure chips or other data storage medium. This enables the mobiledevice to function as both an electronic wallet for commercetransactions and as a transit system token, for access to and farepayment of transit services. In one embodiment, implementation of bothfunctions is achieved by use of a dynamic memory management system thatpermits data for the financial payment, transit and other applicationsto be stored on the chip, with the transit data and storage locationsbeing configurable using the wireless network.

Further, because the mobile device, alone or in conjunction with thenetwork, may incorporate location determining technologies, datarelevant to a particular transit system may be provided as a user movesbetween different locations, regions, or cities. In addition, operationsrequired to configure the chip, either in terms of data storage(partitions, indexing, data management) or functional capabilities, maybe accomplished via the network as a form of over-the-air provisioning.This eliminates the need for a user to visit a transit office or kioskto activate the smart card's functionality, obtain the access controldata or obtain other information needed prior to using a specifictransit system.

In one embodiment, the present invention is directed to a method ofproviding access to a system for a user of a mobile device. The methodincludes generating system access control data for the user of themobile device, where the mobile device is capable of communication anddata exchange over a wireless network, and communication and dataexchange using a near field communications technology. The methodfurther includes providing the transit system access control data to anelement of the wireless network, whereby the access control data iscaused to be transmitted over the wireless network to the mobile device,receiving the access control data at a system collection terminal wherethe access control data is transferred from the mobile device to thecollection terminal using a near field communications technology, andprocessing the received access control data to determine if the user isprovided access to the system.

In another embodiment, the present invention is directed to a system forproviding access for a user of a mobile device. The mobile device iscapable of communication and data exchange over a wireless network, andcommunication and data exchange using a near field communicationstechnology. The invention includes a system element in communicationwith a collection terminal and with an element of the wirelesscommunications network. The invention further includes a processorconfigured to execute a process to generate access control data, wherebythe access control data is provided to the element of the wirelesscommunications network and transferred over the wireless network to themobile device, and a communication module coupled to the collectionterminal, where the communication module is configured to receive theaccess control data from the mobile device using the near fieldcommunications technology.

In yet another embodiment, the present invention is directed to a methodof providing access to a transit system for a user of a mobile device.The method includes providing a wireless network element with accesscontrol data required for access to the transit system, communicatingthe access control data to the mobile device over the wireless network,transferring the access control data to a data storage element containedwithin the mobile wireless device, communicating the access control datato the transit system using a near field communications technology, andprocessing the communicated access control data to determine if the useris provided access to the transit system.

Other objects and advantages of the present invention will be apparentto one of ordinary skill in the art upon review of the detaileddescription of the present invention and the included figures.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a functional block diagram of a first embodiment of a systemfor enabling a contactless element contained within a mobile device tobe used in the fare payment and collection environment, in accordancewith an embodiment of the present invention;

FIG. 2 is a functional block diagram of a second embodiment of a systemfor enabling a contactless element contained within a mobile device tobe used in the fare payment and collection environment, in accordancewith an embodiment of the present invention; and

FIG. 3 is a functional block diagram illustrating the primary functionalelements of a payment system that utilizes a standard portable consumerdevice.

DETAILED DESCRIPTION OF THE INVENTION

The present invention is directed to a system, apparatus, and method forefficiently enabling the use of a contactless element in an environmentsuch as a transit fare payment and collection environment. Embodimentsof the invention can be used to both access a system such as a transitsystem and to pay for goods or services at merchant locations. In thedescription below, a “transit system” is described in detail. However,it is understood that other types of systems can be used in embodimentsof the invention. For example, a wireless phone according to anembodiment of the invention may be used as an access token to access anamusement park, theater, concert hall, school, or other venue, whilealso being used as a payment token to provide payment for ordinarycommercial transactions or money transfers.

Embodiments of the invention use a contactless element (which mayinclude a contactless chip and wireless data transfer element, such asan antenna) embedded within a wireless mobile device to enable a user toaccess multiple transit systems without the need to physically visit atransit office or kiosk to obtain access control and/or fare calculationdata. Instead, such data, and any other data relevant to using thetransit system is provided via the wireless communications network.Further, because the wireless mobile device may have other data accesscapabilities (such as Internet browsing or short-message-service (SMS)),information regarding transit routes, schedules or promotions may alsobe made available to a user.

The contactless element embedded within the mobile device may combinethe capabilities for retail point of sale payment and transit systemaccess and use. This permits the mobile device to function as afinancial payment mechanism or token (such as a credit/debit card) andas a transit system (or other venue) access token. In such anembodiment, the chip that forms at least part of the contactless elementmay utilize a dynamic memory storage element. In such a storage element,the memory in the chip may be partitioned to include a section forstorage of payment related functions, and a section partitioned fortransit applications. The transit application may be resident on themobile device or sent to the mobile device over the wireless network.The transit application may have preloaded data for one of or moretransit agencies and have the ability to accept data for other agenciesdelivered via the wireless network. The transit application section maybe configurable using the wireless network to permit provisioning ofaccess control data, fare calculation data, or other relevant data usedin one or more transit systems. In this way, the data storage section ofthe chip, though limited, may be used in multiple transit systemenvironments through updating or overwriting the data as required forthe particular transit agency, region, city, or geographical area.

The contactless element can communicate with a transit system farecollection mechanism using a short range communication method, such as anear field communications (NFC) capability. Examples of such NFCtechnologies include ISO standard 14443, RFID, Bluetooth™ and Infra-redcommunications methods. Thus, the mobile device may be provisioned withtransit system data over-the-air in accordance with the requirements ofthe transit system of interest, with the transit system specific databeing stored in a dedicated storage region of the chip. Further, thetransit application data storage region may be of a dynamic nature,permitting transit system data to be written and erased as needed tomake the most efficient use of the storage medium. Although volatiledata storage chips (EEPROMs) are used in one embodiment of theinvention, other data storage media may be used in other embodiments ofthe invention.

Both transit and payment applications have adopted the ISO 14443standard for contactless smart cards. Because of the use of a commonstandard, there has developed a desire to utilize a bank-issuedcontactless payment card as both a commerce payment mechanism at a pointof sale and as a transit fare payment mechanism. This would provide fortwo distinct uses of a single contactless smart card (i.e. transit farecollection and retail point of sale). The present invention is directedto, among other things, overcoming certain disadvantages of using astandard contactless payment card and system in a transit environment.

A first approach to satisfying the desire to combine both functions intoa single contactless smart card may be to utilize a contactless paymentcard in its present form as issued within the transit environment. Aspresently implemented, a contactless payment application as used incommerce is an on-line transaction requiring end-to-end authenticationand issuer (e.g., bank) approval/decline of the transaction. However,because of transaction speed considerations, transit fare payment andcollection requires an off-line transaction at the transit system gateor farebox (of the form described for a smart card terminal/reader).This is because, from the user's point of view, there is insufficienttime in the transit environment to wait for on-line issuerapproval/disapproval of the fare transaction. Ideally, card validationshould be processed at the smart card terminal/reader contained in thetransit gate or farebox.

In addition to the transaction speed issue, there are security and otherrisks associated with the use of a contactless payment application carddesigned for on-line authorization in an off-line transaction. Thesesources of risk include, but are not limited to:

-   -   Authentication: the lack of card/terminal authentication creates        a high potential for fraud through counterfeiting techniques;    -   Fraud: transit transactions are not authorized on-line in real        time as designed. With such off-line transactions, the negative        list (i.e., a list of rejected cards based on the unique card        number) is the primary mechanism to deter fraud. This is        sub-optimal since the negative list would presumably grow        unbounded as more contactless payment cards are issued and/or        wherein the use of counterfeit cards changes the unique card        number on each use;    -   Fare Cost Calculation: the transit fare cannot be calculated at        the gate or farebox without historical use information for the        card. The cost of a transit transaction is dependent upon        previous transaction history for the card. This historical data        is not available, and cannot be written or resident on the        contactless payment card as defined by financial institution        standards;    -   Data Security/Storage: protection of cardholder data in transit        fare collection systems may prove difficult. Tracking data in        the form of the PAN (primary account number for the financial        institution payment card) is the only security data currently        available on a contactless payment card. As a result, transit        fare collection systems would have to collect and store this        data securely, which is not something transit fare collection        systems do presently. If implemented, this requirement presents        added cost and security concerns; and    -   Certification: arranging for issuer (e.g., the banking        organization) approval of the card reader mechanism in a transit        environment may prove difficult to implement. Currently,        contactless payment readers must be approved by financial        payment organizations. This is not something transit system        providers are required to do at present, and if implemented,        adds an additional layer of cost and administrative overhead.

To overcome some of the above-mentioned problems which arise from theoff-line use of a contactless banking card as defined by financialinstitution standards to date, use of additional capability of thecontactless smart card or chip with data storage capability may bepossible. However, using a defined file structure and encryption keysthat are specific to one agency or group of cooperating agencies in atransit fare payment and collection environment raises other issuesspecific to that environment. Specifically, a transit patron is likelyto utilize a multitude of transit systems based in different locations,so that a single transit agency may not be responsible for coordinatingaccess and fare calculation data for all of the systems. This means thatthe contactless smart card may require provisioning with multiple setsof access control and fare calculation data. As the storage space on thecard is limited and because transit agencies and systems change overtime (as well as the data they require for access and farecalculations), the transit data stored on the card may need to beupdated or changed on a regular basis, including deleting stale data ordata not relevant to the transit system(s) currently being used. In thecase of a standard payment type card, this typically requires that auser visit a representative of the transit agency or card issuer andhave the current data programmed into the card for use at that agency orregional location. Such a requirement can rapidly become undesirable astransit patrons seek access to multiple and disparate transit systemsaround the country, and as new agencies introduce fare processingsystems over time.

In this regard, note that at present a transit system user, once theyreceive their dual payment-transit access card and activate it forpayment, would be required to physically go to a designated transitsystem location in order to store transit-specific data for use in thatsystem. As noted, the transit-specific data may include encryption keys,transit fare products, and other data specific to that particular agencyor system. The need to physically go to a transit system location toperform this act would be required at initial issuance of the card aswell as any card re-issuance. For transit systems with a significantnumber of riders (e.g., millions of patrons), the need for such anin-person process may rapidly become undesirable for both the patronsand the transit agency.

FIG. 1 is a functional block diagram of a first embodiment of a system100 for enabling a contactless element contained within a mobile deviceto be used in the fare payment and collection environment, in accordancewith an embodiment of the present invention. As shown in FIG. 1, system100 includes a mobile device 102 having wireless communicationscapabilities 122. Mobile device 102 may be a wireless mobile telephone,PDA, laptop computer, pager, etc. In a typical embodiment, mobile device102 is a cell phone, although as noted, implementation of the presentinvention is not limited to this embodiment. In the case of a cell phoneas the mobile device 102, the device includes mobile device (cell phone)circuitry 104 that enables certain of the telephony functions. Mobiledevice circuitry 104 is capable of communicating wirelessly withcellular system (i.e., a wireless carrier) 120 via cellular network 122.

Mobile device 102 further includes a contactless element 106, typicallyimplemented in the form of a semiconductor chip 106(a) (or other datastorage element) with an associated wireless data transfer (e.g., datatransmission) element 106(b), such as an antenna. Contactless element106 is associated with (e.g., embedded within) mobile device 102 anddata or control instructions transmitted via cellular network 122 may beapplied to contactless element 106 by means of contactless elementinterface 108. Contactless element interface 108 functions to permit theexchange of data and/or control instructions between the mobile devicecircuitry 104 (and hence the cellular network) and contactless element106. Mobile device 102 may also include a secure data space 110, whichmay be used by the device to store operating parameters and/or otherdata utilized in operation of the device. The secure data space 110 maybe in the form of a chip that is separate and apart from the chip in thecontactless element 106, or alternatively, could be a section of memoryin the chip that forms part of the contactless element 106. Note thatthe chip in the contactless element 106 may include data storagecapability in the form of a memory that may be accessed via interface108 to permit the implementation of read, write, and erase functions,for example.

Contactless element 106 is capable of transferring and receiving datausing a near field communications capability 112 (or near fieldcommunications medium) typically in accordance with a standardizedprotocol or data transfer mechanism (identified as ISO 14443/NFC in thefigure). Near field communications capability 112 is a short-rangecommunications capability, such as RFID, Bluetooth™, infra-red, or otherdata transfer capability that can be used to exchange data between themobile device 102 and a local transit fare collection apparatus 130(identified as Transit Fare Collection System (gate, farebox, etc.) inthe figure). Thus, mobile device 102 is capable of communicating andtransferring data and/or control instructions via both cellular network122 and near field communications capability 112.

System 100 for enabling a contactless element contained within a mobiledevice to be used in the fare payment and collection environment furtherincludes Transit Agency central computer/server System 140, whichcommunicates with Cellular Phone System 120 and Transit Fare CollectionSystem 130. Transit Agency System 140 may communicate with CellularSystem 120 via the Internet, a telephony system (landline or wireless)or a dedicated communications system. Transit Agency System 140 maycommunicate with Transit Fare Collection System 130 via one or more ofthe same types of private or public communications systems. Note thatthe Transit Agency Central Computer/Server system 140 may be a computer,clearinghouse, or other system supporting a single or multiplecooperating transit agencies in a region.

Transit Agency System 140 may also be capable of communicating with theentity (termed “Issuing Organization/Third Party Proxy” in the FIG. 150that is responsible for performing certain of the transaction dataprocessing functions for system 100. Issuing organization 150 mayrepresent a bank or other financial organization that issues thepayment/transit data used in the mobile device (or the device itself),and/or acts as a clearing house for processing certain data associatedwith the payment and transit transactions (e.g., account reconciliation,billing, etc.). Note that it is also possible for the operator of thecellular network (i.e., Cellular System 120 in the figure) to be incommunication with issuing organization 150 (shown as a dotted line inthe figure) in order to provide data that may be used by issuingorganization 150 in the processing of transit transactions. Further,note that Issuing Organization 150 may be a third party proxy that actsas an intermediary in the transit system data provisioning and/ortransaction billing processes.

FIG. 2 is a functional block diagram of a second embodiment of a systemfor enabling a contactless element contained within a mobile device tobe used in the fare payment and collection environment, in accordancewith an embodiment of the present invention. FIG. 2 shows the sameelements as FIG. 1, with the exception that the secure data space and/orcontactless element contained within the mobile device are depicted asremovable elements instead of being integrated within the mobile device,as depicted in FIG. 1. Examples of such removable elements include SIMcards, flash memory cards, and other suitable devices.

As described, inventive system 100 provides an efficient means of usinga contactless element in a transit or other environment. By integratingthe contactless element with the mobile device's telephonycommunications capabilities, the cellular network may be used as thedata transfer channel between a Transit Agency's computing system andthe transit system user's mobile device. This facilitates the provisionof access control data, encryption keys, fare calculation data, andother data relevant to a specific transit system. As noted, some of thedata and/or processing services may be provided to the end user fromanother source, such as the issuing organization or a trusted thirdparty, or via the transit agency after being provided by the issuingorganization or trusted third party. Such data may includeauthentication and access control data (encryption keys, passwords,etc.), for example. In this situation a trusted third party may serve asa proxy for the transit agency or issuing organization, and performcertain of the data processing, file maintenance, account billing, orkey generation and distribution functions required for operation of thesystem.

As indicated, the short range communications capability is utilized totransfer data between the mobile device and the transit system's farecollection mechanism (e.g., gate, terminal, farebox, etc.). Thiscommunications channel is used to transfer information needed by thetransit system to enable a user to have access to a transit device ofthe system at that site, and provide some or all of the fare calculationdata required by the system. As will be described, the inventive systemprovides both an efficient method of utilizing the contactless element,and in addition, provides other benefits and advantages in the transitfare payment and collection environment.

An example of the typical manner in which a transit system user wouldutilize the inventive system will now be described. In order to access atransit system using a form of payment other than cash, a user willtypically require some form of identification and/or authentication topermit them to be recognized by the system as a valid user who isentitled to utilize the system's resources. This identification orauthentication data may be in the form of a password, personalidentification number or code (e.g., a primary account number (PAN)),and/or an element of an encryption process (such as a “key” used tocalculate an authentication code that must be exchanged with anothersystem element that validates the code). In addition, the transit systemwill preferably have access to information regarding the user's transitaccount, i.e., the amount of funds available so as to ensure that thecalculated fare can be covered by the account balance.

In order to ensure a desired level of security, different transitsystems may have different authentication requirements. In addition,most transit modes (e.g., bus, train, ferry) will have different transitfares and fare computation requirements. As users move between differentlocations (cities, counties, states, etc.), they may encounter a largenumber and wide variety of transit system options. In order to utilize acontactless smart element for payment of transit fees, the userpreferably has available to him the data required to access and utilizethose transit systems.

These and other obstacles may be overcome by the present system in whichdata required for access to and utilization of a specific transit systemmay be provided to a user via cellular network 122. A processor (e.g., amicroprocessor or computational apparatus) associated with the TransitAgency Computer System 140 may be used to generate and/or control thedistribution of access control data, fare computation/collection data,and other data relevant to the operation of a transit system. This datais communicated to an element (e.g., a computer, a transmission tower, anetwork node, a wireless carrier, etc.) of the cellular system 120 viathe Internet or another suitable communications channel. This enablesthe transit agency to provide a cellular network operator withinformation to permit a customer of the operator to access and utilizethe transit system. Note that in addition to the transit agency, thecontactless element issuer and/or transaction data processing agency mayalso provide data to be stored on the chip in the contactless element,either directly to the cellular operator, via the transit agency, or viaa trusted third party organization.

The access control data, fare computation/collection data, and otherdata relevant to the operation of the transit system is transferred tothe mobile device via the cellular network. The data is received by themobile device and passed through the contactless element interface andstored in the appropriate section of the chip or other form of datastorage that forms part of the contactless element. Note that the “data”may also be control instructions that cause the execution of someoperation related to the contactless element, such as data storage, dataremoval, configuration of the data storage element (partitioning ofmemory), etc.

Transit Agency Computer System 140 may also provide, or generate,certain information regarding the user's account or authentication datato Transit Fare Collection system 130 which may be a fare collectionterminal. This data may be used as part of the authentication (accesscontrol) process and/or fare computation/collection process. Forexample, the Transit Agency or transit system operator may provide alist of cards prohibited from use in the transit system (through anegative list), and/or a portion of the data required for a mutualauthentication process (such as a part of a “key” or one of two keysrequired in the authentication process). Further, if a third party isinvolved in the provisioning of the transit system data or in theaccount management functions (such as debiting a user account for thetransit transaction), this data can be provided to the Transit AgencyComputer System 140 or cellular network operator for eventualtransmission to the user's mobile device.

As a result, when a user in possession of the mobile device passeswithin communications distance of a terminal associated with TransitFare Collection system 130, the contactless element within the devicecan communicate with the fare collection system via the near fieldcommunications capability; in this way, the mobile device can be used toidentify the user, exchange authentication data (e.g., encryption keysor other forms of authentication/identification), provide data requiredfor a fare computation, or provide other account related data to thecollection system. Further, this data may be provided to the transitagency and/or transaction processing entity if needed for accountmanagement or other functions.

As mentioned, one means of performing an authentication process involvesthe exchange of “keys” to enable mutual authentication between twoparties. In this case, the chip embedded in the mobile device would beprovisioned with key data that could be used to identify the user (andpossibly be linked to the user's account data for transaction processingpurposes) and permit access to the transit system. Further, withdifferent keys applicable to different transit systems, and possibly tothe same system at different times, the cellular network may be used toprovide the required key data as needed by the user.

In addition, note that provision of the required access and/or farecomputation data could be triggered by any of several factors: (1)location determining technologies that notify a user of the availabilityof transit system related data based on geographic proximity to atransit system and initiate the provisioning process automatically orupon user request; (2) detection of user proximity to transit farecollection infrastructure via the near field communications capability;or (3) previously provided trip planning data that is used to triggerthe provisioning process based on date/time.

For example, a mobile device equipped with a location determiningtechnology such as GPS (global satellite positioning system) could beused to determine when a user is within a specified distance of atransit terminal, city, region, etc., and this determination could beused by the relevant transit agencies in that region to provide the userwith the transit agency data they may require. Providing the data couldbe done automatically (where data is “pushed” to the mobile device upondetermining the location and the relevant transit agencies), or viareceiving a request from the user after presenting the user with amessage or screen display that permits access to the relevant data.Further, the transit options provided to the user can be filtered basedon user preferences, previous user behavior, user characteristics, cost,availability within a certain time frame, or other relevant parameters.

In addition to, or instead of using GPS for location determination, thecellular network infrastructure may be used to determine the location ofthe mobile device. This method can be used to localize the position ofthe mobile device to within a cell or section of the network coverage.This may be sufficient to trigger the provision (or offer to provision)transit agency access and fare computation data for the transit modeswithin the vicinity of the determined location.

Similarly, the transit system data may be provided to the user upon theuser being detected by a transit terminal as a result of the contactlesselement communicating with the terminal using the near fieldcommunications capability of the contactless element. In this case, thetransit terminal could be configured to detect the contactless element,and provide a message (either directly from the terminal or as a resultof a message sent via the cellular network) to the user offering toprovision the contactless element with the required transit data.

Further, another method of providing the required transit system data isone based on trip planning data, such as that contained within acalendar program. In this case data concerning the user's expectedlocation is used to trigger the provisioning of the transit system data.For example, on the day a user is expected to be in a particular regionor city, the relevant data for the transit systems in that region orcity could be provided to the user's mobile device over the cellularnetwork.

As noted, the cellular network may also be used to provide the mobiledevice with fare computation data such as fare schedules, transit fareaccount balance, promotional information, and other related transitsystem information. This data may be stored within the contactlesselement data storage area and exchanged with the transit fare collectionsystem element (terminal, farebox, etc.) to determine the appropriatefare based on start-point, end-point, time of day, applicable farestructure, etc. The ability to provision the contactless element via thecellular system is particularly advantageous in situations where fareschedules change or rates for use of two separate transit systems arelinked (so that a user of one system can obtain a discount on a secondsystem).

As discussed, the inventive system and method may be utilized with acontactless element that is capable of being used for both transactionpayment and transit functions. In such a case, the issuer (or anotherentity) may function as an intermediary or trusted third party for thetransit agencies and co-ordinate the provisioning of the contactlesselement with the transit data. In addition, the contactless element datastorage may be configured to broadly contain two regions: a first regiondedicated to data for use in a payment transaction (e.g., account data,PIN data, communication protocol data for use in the point of saleenvironment); and a second region dedicated to the transit application.The second region would preferably be partitioned and managed to beisolated from the first region so that an application accessing oneregion would be excluded from accessing the other region. This wouldfunction to prevent a transit application from accessing private accountdata such as the PIN, and hence help to ensure the security of suchdata.

In one embodiment, the transit specific region would be partitioned toaccommodate data for multiple transit systems. Allocation of thepartitions and associated memory space may be facilitated by a bit-mapidentifying unused memory space that could be read by a transit systemwishing to store data in the data storage element in the mobile device.The bit-map or other form of index could be determined at the time ofissuance, or updated to reflect present space allocation (taking intoaccount additions and deletions of data). The transit specific region ofthe memory may also be a free-form memory, wherein a dynamic filemanagement protocol is utilized. In this approach, a flexible filestructure and memory allocation is used to permit multiple transitsystems to access and store data as needed. An example of such a dynamicfile management system that is suitable for the present invention is onetermed the Global Platform Storage Technology, developed by Visa, theassignee of the present invention. A description of such a data storagesystem is found in U.S. patent application Ser. No. 10/656,858, filedSep. 5, 2003, entitled “Method and System for Facilitating Data Accessand Management On A Secure Token”, the contents of which is herebyincorporated by reference in its entirety.

Prior to further discussing the use of a mobile device that is capableof combined payment and transit functions, and the possible scenario ofan issuer acting as an intermediary or trusted third party, a briefdescription of the standard electronic payment operation will bepresented. Typically, an electronic payment transaction is authorized ifthe consumer conducting the transaction is properly authenticated andhas sufficient funds or credit to conduct the transaction. Conversely,if there are insufficient funds or credit in the consumer's account, orif the consumer's portable consumer device is on a negative list (e.g.,it is indicated as possibly stolen), then an electronic paymenttransaction may not be authorized. In the following description, an“acquirer” is typically a business entity (e.g., a commercial bank) thathas a business relationship with a particular merchant. An “issuer” istypically a business entity (e.g., a bank) which issues a portableconsumer device such as a credit or debit card to a consumer. Someentities may perform both issuer and acquirer functions.

In standard operation, an authorization request message is createdduring or after a consumer purchase of a good or service at a point ofsale (POS) using a portable consumer device (such as a credit or debitcard). In this case, the portable consumer device may be a wirelessphone. The authorization request message can be sent from the POSterminal located at a merchant to the merchant's acquirer, to a paymentprocessing system, and then to an issuer. An “authorization requestmessage” can include a request for authorization to conduct anelectronic payment transaction. It may include one or more of an accountholder's payment account number, currency code, sale amount, merchanttransaction stamp, acceptor city, acceptor state/country, etc. Anauthorization request message may be protected using a secure encryptionmethod (e.g., 128-bit SSL or equivalent) in order to prevent data frombeing compromised.

FIG. 3 shows a payment system 20 that can be used with a standardpayment card as part of a purchase and account management operation. Thepreviously described mobile device can be used with the system 20 aswell as the previously described transit system. The system 20 includesmerchant locations 22(a), 22(b) and acquirers 24(a), 24(b) associatedwith those merchant locations. The different merchant locations 22(a),22(b) may be affiliated with a single merchant. A consumer 30 maypurchase goods or services at the merchant locations 22(a), 22(b) usinga portable consumer transaction payment device 32. The acquirers 24(a),24(b) can communicate with an issuer 28 via a payment processing system26.

The portable consumer device 32 may be in many suitable forms. Forexample, the portable consumer device can be a mobile device thatincorporates a contactless element such as a chip for storing paymentdata (e.g., a BIN number, account number, etc.) and a wireless datatransfer (e.g., transmission) element such as an antenna, a lightemitting diode, a laser, etc.). In such a case, the mobile device mayincorporate both payment and transit functions. The portable consumerdevice may also include a keychain device (such as the Speedpass™commercially available from Exxon-Mobil Corp.), etc. The devicecontaining the chip or other data storage element may be a cellularphone, personal digital assistant (PDAs), pager, transponder, or thelike. The portable consumer device may also incorporate the ability toperform debit functions (e.g., a debit card), credit functions (e.g., acredit card), or stored value functions (e.g., a stored value card).

The payment processing system 26 may include data processing subsystems,networks, and other means of implementing operations used to support anddeliver authorization services, exception file services, and clearingand settlement services for payment transactions. An exemplary paymentprocessing system may include VisaNet™ Payment processing systems suchas VisaNet™ are able to process credit card transactions, debit cardtransactions, and other types of commercial transactions. VisaNet™, inparticular, includes a VIP system (Visa Integrated Payments system)which processes authorization requests and a Base II system whichperforms clearing and settlement services.

The payment processing system 26 may include a server computer. A servercomputer is typically a powerful computer or cluster of computers. Forexample, the server computer can be a large mainframe, a minicomputercluster, or a group of servers functioning as a unit. In one example,the server computer may be a database server coupled to a web server.The payment processing system 26 may use any suitable wired or wirelessnetwork, including the Internet.

The merchant locations 22(a), 22(b) typically have point of sale (POS)terminals (not shown) that can interact with the portable consumerdevices 32. Any suitable point of sale terminal may be used, includingdevice (e.g., card) readers. The device readers may include any suitablecontact or contactless mode of operation. For example, exemplary cardreaders can include RF (radio frequency) antennas, magnetic stripereaders, etc., to interact with the portable consumer devices 32.

As noted, a desirable element of the standard electronic paymenttransaction system is the entity responsible for the account managementfunctions involved in the transaction. Such an entity may be responsiblefor ensuring that a user is authorized to conduct the transaction (viaan authentication process), confirm the identity of a party to atransaction (via receipt of a personal identification number), confirm asufficient balance or credit line to permit a purchase, and reconcilethe amount of purchase with the user's account (via entering a record ofthe transaction amount, date, etc.). In the context of the presentinvention, such an entity may perform certain transit related servicesin addition to the standard transaction services.

For example, the payment transaction processing entity may beresponsible for communicating with one or more transit agency computersystems to provide authentication data (by generating and/ordistributing keys) for control of access to transit systems, processdata obtained from a transit user's mobile device to associate transitsystem user identification data with an account used to pay for thetransit expenses, generate billing records for transit activities, etc.Further, such an entity may also communicate with the operator of acellular network to provide such data as needed to the operator foreventual provision to the end user's device. Note that a trusted thirdparty may also perform some or all of these functions, and in thatmanner act as a clearinghouse for access control data and/or transitactivity data processing.

As described, the present invention provides a system, apparatus, andmethod for enabling the use of a mobile device including a contactlesselement in a transit fare payment and collection environment. Further,the mobile device may be used for both transaction payment and transitservices. Embodiments of the present invention provide a solution totransit environment specific problems, such as transaction timeconstraints and the need to provision the data storage element in thecontactless element with data for multiple transit systems, whilefacilitating the dual use nature of a typical smart card with dualtransit and payment functions. In addition, the use of the cellularnetwork to provision data in the contactless element in the mobiledevice provides a solution to certain problems that arise in both thepayment and transit use cases.

For example, using the cellular network to provision the contactlesselement eliminates the need for a user to physically visit a transitsystem location to obtain the data required for access to the system.This benefit is available for the transit specific operations thatcorrespond to both the initial issue of the data for the mobile deviceand for any re-issuance of the data for the mobile device that is neededbecause of fraud, etc. Thus, the registration, provisioning andre-provisioning of access control and other data on the chip in thecontactless element can be performed without the need for a user tovisit a specified location.

Further, as mentioned, data storage space in the chip in the contactlesselement may be limited, and insufficient to store the data required toprovide access to and use of multiple transit systems. One possiblesolution would be to allocate memory space on the chip in advance toeach transit agency that desires to participate. However, as moretransit agencies desire to participate, the chip is likely to run out ofdata storage space. In this situation, the limited memory space on thechip may prevent the chip from being used with transit systems to whichthe user desires access. Further, in the situation where low cost staticmemory is used on the chip, once initialized, the chip storage spacecannot be modified to add new transit system or agency file partitions.

These and other problems are overcome by an embodiment of the presentinvention that utilizes a combination of over the air provisioning and adynamic memory space to provide a user with the data they need to accessand utilize the transit systems of choice. The dynamic memory space maybe managed to store needed data and remove data that is not presentlyneeded by the user. The over the air provisioning capability provided bythe cellular network and/or near field communications channel may beused to erase stale data, re-configure the memory space (e.g., introducenew memory partitions), write identification, access control and/or farecomputation data, provide encryption keys, and facilitate other dataprocessing and management operations as required.

As discussed, the inventive system and method may be utilized with achip that is capable of being used for both transaction payment andtransit applications. In such a case, the data storage element may beconfigured to broadly contain at least two distinct data storageregions: a first region dedicated to data for use in a paymenttransaction (e.g., account data, PIN data, primary account number or PANdata, expiration date, communication protocol data for use in the pointof sale environment, etc.); and a second region dedicated to the transitapplication (e.g., transit system identification, stored value amountsfor specific transit systems, loyalty data, etc.). The second region maybe partitioned and managed to be isolated from the first region so thatan application accessing one region would be excluded from accessing theother region.

As noted, the transit specific region of the memory may be a free-formmemory, wherein a dynamic file management protocol is utilized. In thisapproach, a flexible file structure and memory allocation is used topermit multiple transit systems to access and store data as needed. Dataand memory management instructions provided via the cellular networkand/or near field communications channel can be used to control dataoperations (read, write, erase, etc.), allocate or re-allocate memoryareas, and otherwise implement whatever memory management functionalityis required. This dynamic memory management capability provides asolution to the problem of limited memory capacity on a chip and to theneed to provision the user's device with data for multiple transitsystems as required by the user's needs.

Note that the secure data space incorporated in the mobile device may beof many types, depending upon the device type and model. Examplesinclude permanent memory contained with the other circuitry of thedevice (such as shown in FIG. 1), or removable memory modules intendedfor data storage (e.g., SIM or SAM chips, as shown in FIG. 2). Thesecure data space is accessible via components of the device (e.g., thecontactless element interface and mobile device circuitry) to providethe ability to add, delete, or modify the contents as required toprocess transactions in a particular transit fare collection system.

As noted, the secure data space and/or data storage space in the chip inthe contactless element is generally limited on a mobile device such asa cell phone. This is one of the motivations for the use of a dynamicdata and memory management approach in the present invention. The dataand security access keys stored within the memories can be updated basedon proximity to or location within a particular city, or proximity to aterminal of a specific transit agency (i.e., detection by a transitterminal followed by provisioning, or location determined to be withinsome distance of a terminal followed by provisioning). Instead oftransit data being permanently written to memory upon issuance, themobile device's data storage space can be updated and overwritten asrequired as the device owner moves between locations and applicabletransit systems.

Further, as recognized by the inventors, providing a dynamic memory thatcan be updated in real-time via the cellular network provides a way toimplement several beneficial aspects of the system (as noted previouslyand below):

(1) A transit user will not need to physically go into an attendedtransit location or to an unattended machine or kiosk in order to storetransit system specific data for use in a desired transit system. Datasuch as encryption keys, transit fare products, and other data specificto a particular transit agency or system may be loaded into the mobiledevice's secure memory remotely, over the cellular network. This willeliminate the need for a transit user to physically visit a transitlocation either initially, or upon re-issuance of the credentials.Establishing an account relationship with the transit agency may beaccomplished by way of mail, internet, phone or other more convenientprocesses, with the appropriate transit fare data being loaded to theuser's phone over the cellular network;

(2) The file space allocated to each participating transit agency orsystem can be dynamically managed. As more transit agencies desire toparticipate, the device memory can be used and overwritten as the usermoves from location to location, city to city, and agency to agency. Thetransit products owned by the user for a specific agency will be held inthe device (at least temporarily) and in the agency centralcomputer/server system. When the user travels to a new location, thefare products and data for the relevant transit agencies can overwriteunneeded data for other agencies outside the area. When needed again,the overwritten data can be re-written to the device, as initiated bythe agency computer/server system for the new location;

(3) The allocation of secure file space does not have to be done inadvance, as with that of card personalization by a bank. As new transitagencies sign up to participate, their file structure, data, andencryption keys can be dynamically loaded to the card/device as needed.This eliminates the need for mobile device or data re-issuance to allownew agencies to participate;

(4) The present invention provides the opportunity for a trusted thirdparty to act as the central computer/server system for multiple transitagencies and systems. This provides the opportunity for multipleagencies and card issuers to work together in a many-to-manyrelationship for coordination and association of transit fare productsand cardholder payment data. This may minimize or eliminate the need foreach of the agencies to maintain their own computer/server systems infavor of one party performing transit file management on behalf of many;

(5) Bank issued payment cards typically have an expiration date, andmust be re-issued every three to four years. In the case of a card beingre-issued, the cardholder would be required to go through a process ofregistering their new card with each transit agency prior to use of thenew card. With the mobile device provisioning solution described herein,this is not necessary. The device will not expire, and the appropriatetransit fare products and data can be loaded to the device for use intransit at any time. If the device is lost or exchanged, the new devicemay be provisioned over the network in a similar manner;

(6) The ability of the mobile device to accept commands from thecentral/server systems also allows a pro-active key management approachto maintain security. If a key is compromised or if the agency desireskey exchange on a regular basis, it is possible that file access keyscan be changed through the cellular network;

(7) It is typical for a transit fare account to become invalid from timeto time for any of several possible reasons. By using a mobile device inthe manner described, it is possible to load data to the device to blockits use in a transit application. For example, the payment account thatis linked to a transit fare account may be unpaid or become invalid, inwhich case it may be desirable to block access to transit system usage.Similarly, if the transit account has no value or products, it may bedesirable to block operation of the device as a transit fare paymenttool, and unblocked it once the payment account is valid again. It isalso possible to lock transit use permanently as in the case of a lostor stolen device;

(8) Because a cell phone (as well as other types of mobile devices) hasa display, keypad, and scrolling capability, it is possible for transitsystem users to access their transit accounts. This may provide theability to remotely monitor transit fare value or product status, reviewtransit rider history, purchase new transit products, obtain passes,etc.;

(9) With the display and keypad functionality of a mobile device(coupled with Internet connectivity), it is possible for a transitsystem user to gain access to transit system route and schedulinginformation prior to or during their use of the transit system. The usermay be able to determine that a bus is running late, that another routeis more efficient, or that service is/is not available for theirparticular destination. This information may be obtained by one ofseveral mechanisms:

-   -   a. Use of the phone's messaging capability (e.g., SMS) to query        the agency computer/server systems for route, schedule, and        on-time performance of specific buses, trains, etc.; or    -   b. Use of the phone's NFC capability to query smart signs,        on-board terminals, or other in-field information sources that        can provide route and service information.

Further, the inventive system also enables potential new businessmodels. For instance, it is possible that special offers coveringtransit fares and/or other venues could be made available. As anexample, a transit system user might see a smart sign for a baseballgame. The user would present the device to the smart sign andimmediately load a ticket for the game plus a discounted transit passfor the train to and from the game. These products could be loaded tothe phone and payment for these products could be charged to theassociated payment account.

In addition, there is the potential for location based services to beoffered to customers. When a mobile device is used for transit at a busor rail station, the device can determine its location and offerproducts and services based on that location. An example is the use ofthe device to pay for a fare exiting at a rail station and soon after, acoupon for the local coffee shop could be presented on the mobiledevice.

In accordance with the present invention there have been described asystem, apparatus, and methods for enabling use of a mobile device witha contactless element in a transit fare payment environment. Thecontactless element is embedded within a mobile device that is capableof communication and data transfer over a cellular network. Thecontactless element may include a chip that may combine transactionpayment and transit fare applications. The data on the chip may beprovisioned and otherwise manipulated using the cellular network, toprovide transit system access and fare calculation data as needed by theuser. The chip may utilize a dynamic data storage model to permit thelimited storage capacity to be efficiently used for access to multipleand changing transit systems. In addition to transit fare applications,the invention may be used as an access token for other venues, forexample, theaters, amusement parks, art exhibits, etc.

It should be understood that the present invention as described abovecan be implemented in the form of control logic using computer softwarein a modular or integrated manner. Based on the disclosure and teachingsprovided herein, a person of ordinary skill in the art will know andappreciate other ways and/or methods to implement the present inventionusing hardware and a combination of hardware and software

Any of the software components or functions described in thisapplication, may be implemented as software code to be executed by aprocessor using any suitable computer language such as, for example,Java, C++ or Perl using, for example, conventional or object-orientedtechniques. The software code may be stored as a series of instructions,or commands on a computer readable medium, such as a random accessmemory (RAM), a read only memory (ROM), a magnetic medium such as ahard-drive or a floppy disk, or an optical medium such as a CD-ROM. Anysuch computer readable medium may reside on or within a singlecomputational apparatus, and may be present on or within differentcomputational apparatuses within a system or network.

While certain exemplary embodiments have been described in detail andshown in the accompanying drawings, it is to be understood that suchembodiments are merely illustrative of and not intended to berestrictive of the broad invention, and that this invention is not to belimited to the specific arrangements and constructions shown anddescribed, since various other modifications may occur to those withordinary skill in the art.

As used herein, the use of “a”, “an” or “the” is intended to mean “atleast one”, unless specifically indicated to the contrary.

1.-28. (canceled)
 29. A method comprising: determining a first locationof a mobile device operated by a user; based on the first location ofthe mobile device, determining a first system in the vicinity of themobile device; in response to determining the first system,automatically pushing first data comprising a first encryption key forthe first system to the mobile device, the first encryption key beingstored in a memory in the mobile device, wherein the first encryptionkey is configured to generate a first code to work with the first systemwhen the mobile device interacts with a first reader at the first systemand passes the first code to the first reader via a contactless elementin the mobile device; determining a second location of the mobiledevice; based on the second location of the mobile device, determining asecond system in the vicinity of the mobile device; and in response todetermining the second system, automatically pushing second datacomprising a second encryption key for the second system to the mobiledevice, the second encryption key being stored in the memory in themobile device, wherein the second encryption key is configured togenerate a second code to work with the second system when the mobiledevice interacts with a second reader at the second system and passesthe second code to the second reader via the contactless element in themobile device.
 30. The method of claim 29, wherein determining the firstlocation of the mobile device further comprises determining the firstlocation using one or more of global positioning satellite (GPS) data orwireless communications network infrastructure data.
 31. The method ofclaim 29, wherein pushing the first data for the first system to themobile device further comprises pushing the first data to the mobiledevice using a wireless communications network.
 32. The method of claim29, wherein the mobile device is a mobile phone.
 33. The method of claim29, further comprising issuing a control instruction to cause apartitioning of the memory.
 34. The method of claim 29, wherein thememory includes a first data storage region containing system data and asecond data storage region containing payment transaction account data,the payment transaction account data including a payment accountidentifier for a payment account, the payment transaction account dataused to enable the mobile device to operate as a payment device.
 35. Themethod of claim 29, wherein the payment transaction account dataincludes user security data for the payment account.
 36. The method ofclaim 29, wherein the memory is contained in the contactless element.37. A server computer comprising a processor and a computer readablemedium coupled to the processor, the computer readable medium comprisingcode, executable by the processor for implementing a method comprising:determining a first location of a mobile device operated by a user;based on the first location of the mobile device, determining a firstsystem in the vicinity of the mobile device; in response to determiningthe first system, automatically pushing first data comprising a firstencryption key for the first system to the mobile device, the firstencryption key being stored in a memory in the mobile device, whereinthe first encryption key is configured to generate a first code to workwith the first system when the mobile device interacts with a firstreader at the first system and passes the first code to the first readervia a contactless element in the mobile device; determining a secondlocation of the mobile device; based on the second location of themobile device, determining a second system in the vicinity of the mobiledevice; and in response to determining the second system, automaticallypushing second data comprising a second encryption key for the secondsystem to the mobile device, the second encryption key being stored inthe memory in the mobile device, wherein the second encryption key isconfigured to generate a second code to work with the second system whenthe mobile device interacts with a second reader at the second systemand passes the second code to the second reader via the contactlesselement in the mobile device.
 38. The server computer of claim 37,wherein determining the first location of the mobile device furthercomprises determining the first location using one or more of globalpositioning satellite (GPS) data or wireless communications networkinfrastructure data.
 39. The server computer of claim 37, whereinpushing the first data for the first system to the mobile device furthercomprises pushing the first data to the mobile device using a wirelesscommunications network.
 40. The server computer of claim 37, wherein themobile device is a mobile phone.
 41. The server computer of claim 37,further comprising issuing a control instruction to cause a partitioningof the memory.
 42. The server computer of claim 37, wherein the memoryincludes a first data storage region containing system data and a seconddata storage region containing payment transaction account data, thepayment transaction account data including a payment account identifierfor a payment account, the payment transaction account data used toenable the mobile device to operate as a payment device.
 43. The servercomputer of claim 37, wherein the payment transaction account dataincludes user security data for the payment account.
 44. A systemcomprising: a mobile device; and a server computer in communication withthe mobile device, the server computer comprising a processor and acomputer readable medium coupled to the processor, the computer readablemedium comprising code, executable by the processor for implementing amethod comprising determining a first location of the mobile deviceoperated by a user, based on the first location of the mobile device,determining a first system in the vicinity of the mobile device, inresponse to determining the first system, automatically pushing firstdata comprising a first encryption key for the first system to themobile device, the first encryption key being stored in a memory in themobile device, wherein the first encryption key is configured togenerate a first code to work with the first system when the mobiledevice interacts with a first reader at the first system and passes thefirst code to the first reader via a contactless element in the mobiledevice, determining a second location of the mobile device, based on thesecond location of the mobile device, determining a second system in thevicinity of the mobile device, and in response to determining the secondsystem, automatically pushing second data comprising a second encryptionkey for the second system to the mobile device before the user pays tothe second system, the second encryption key being stored in the memoryin the mobile device, wherein the second encryption key is configured togenerate a second code to obtain to the second system when the mobiledevice interacts with a second reader at the second system and passesthe second code to the second reader via the contactless element in themobile device.
 45. The system of claim 44, wherein determining the firstlocation of the mobile device further comprises determining the firstlocation using one or more of global positioning satellite (GPS) data orwireless communications network infrastructure data.
 46. The system ofclaim 44, wherein pushing the first data for the first system to themobile device further comprises pushing the first data to the mobiledevice using a wireless communications network.
 47. The server computerof claim 44, wherein the mobile device is a mobile phone.
 48. The systemof claim 44, wherein the method further comprises issuing a controlinstruction to cause a partitioning of the memory.
 49. The system ofclaim 44, wherein the memory includes a first data storage regioncontaining system data and a second data storage region containingpayment transaction account data, the payment transaction account dataincluding a payment account identifier for a payment account, thepayment transaction account data used to enable the mobile device tooperate as a payment device.